QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-0290

Back to search

CVE-2010-0290

Published: Jan 22, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2010-0176
vdb-entry
x_refsource_VUPEN
RHSA-2010:0062
vendor-advisory
x_refsource_REDHAT
38240
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:6815
vdb-entry
signature
x_refsource_OVAL
ADV-2010-1352
vdb-entry
x_refsource_VUPEN
USN-888-1
vendor-advisory
x_refsource_UBUNTU
40086
third-party-advisory
x_refsource_SECUNIA
ADV-2010-0622
vdb-entry
x_refsource_VUPEN
38219
third-party-advisory
x_refsource_SECUNIA
MDVSA-2010:021
vendor-advisory
x_refsource_MANDRIVA
oval:org.mitre.oval:def:8884
vdb-entry
signature
x_refsource_OVAL
DSA-2054
vendor-advisory
x_refsource_DEBIAN
SUSE-SA:2010:008
vendor-advisory
x_refsource_SUSE
oval:org.mitre.oval:def:7512
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now